From owner-freebsd-net@FreeBSD.ORG Wed Apr 4 08:45:56 2007 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 6053A16A403 for ; Wed, 4 Apr 2007 08:45:56 +0000 (UTC) (envelope-from stefan.lambrev@sun-fish.com) Received: from blah.sun-fish.com (blah.sun-fish.com [217.18.249.150]) by mx1.freebsd.org (Postfix) with ESMTP id 1CF5F13C43E for ; Wed, 4 Apr 2007 08:45:56 +0000 (UTC) (envelope-from stefan.lambrev@sun-fish.com) Received: from blah.sun-fish.com (localhost [127.0.0.1]) by blah.sun-fish.com (Postfix) with ESMTP id 19E8A1B10EE6 for ; Wed, 4 Apr 2007 10:45:55 +0200 (CEST) Received: from [192.168.3.125] (hater.cmotd.com [192.168.3.125]) by blah.sun-fish.com (Postfix) with ESMTP id AAF061B10EE0 for ; Wed, 4 Apr 2007 10:45:54 +0200 (CEST) Message-ID: <461365C2.9080609@sun-fish.com> Date: Wed, 04 Apr 2007 11:45:54 +0300 From: Stefan Lambrev User-Agent: Thunderbird 1.5.0.10 (X11/20070326) MIME-Version: 1.0 To: freebsd-net@freebsd.org Content-Type: text/plain; charset=windows-1251; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV using ClamSMTP on BLAH Subject: sockets without owner. X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: stefan.lambrev@sun-fish.com List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 Apr 2007 08:45:56 -0000 Hello list, I'm having very strange problem. I have near 200 sockets reported by netstat -An, which are NOT reported by sockstat and fstat. All of them look like (output from netstat -An) : ffffff0169282000 tcp4 0 0 192.168.13.12.4965 192.168.13.3.8080 FIN_WAIT_2 I'm trying to figure out what keeps them active (tcpdump shows traffic from 192.168.13.12 to 192.168.13.3) The application that create them is stopped before more then a week but request are still "flying" around. I tried fstat |grep ffffff0169282000, but the output is 0 lines. Is there any way to close those sockets, as it appears that they are stalled and without owner? And what is the timeout for FIN_WAIT_2 in freebsd ? (the rfc doesn't define timeout but I read somewhere that freebsd's network stack have timeout) FreeBSD 6.2-PRERELEASE SMP amd64. I have access to both IPs - 192.168.13.12 is http balancer and 192.168.13.3 is apache server (both were restarted) -- Best Wishes, Stefan Lambrev ICQ# 24134177